550 matches found
UBUNTU-CVE-2025-44906
jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c...
PT-2025-23239
Name of the Vulnerable Software and Affected Versions jhead version 3.08 Description A heap-use-after-free issue was discovered in the ProcessFile function at jhead.c. This issue affects the processing of files, potentially leading to exploitation. Recommendations For jhead version 3.08, consider...
CVE-2025-44906
jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c...
jhead Resource management error vulnerability
jhead is a command line program by the individual developer Matthias Wandel. A security vulnerability exists in jhead version v3.08, which stems from a post-release reuse of the ProcessFile function in the jhead.c file, which could lead to the execution of arbitrary code...
CVE-2025-44906
The jhead v3.08 library contains a heap-use-after-free vulnerability in the ProcessFile function located at jhead.c . The root cause is improper memory management in ReadJpegSections , where a memory buffer is reallocated and subsequently accessed after being freed. This condition can be triggere...
CVE-2025-44906
jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c...
CVE-2025-44906
jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c...
CVE-2025-44906: Use After Free
jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c...
CVE-2025-44906
jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c...
CVE-2025-44906
Removed by vendor...
CVE-2020-28840
Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause a denial of service DoS...
Linux Distros Unpatched Vulnerability : CVE-2022-28550
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape, jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i o...
Linux Distros Unpatched Vulnerability : CVE-2021-28276
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c. CVE-2021-28276...
Linux Distros Unpatched Vulnerability : CVE-2021-28275
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via...
Fedora 37 : jhead (2022-628829f0e6)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-628829f0e6 advisory. added patches to fix CVE-2022-41751 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...
GLSA-202406-05 : JHead: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202406-05 JHead: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in JHead. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...
JHead: Multiple Vulnerabilities
Background JHead is an EXIF JPEG header manipulation tool. Description Multiple vulnerabilities have been discovered in JHead. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround a...
OPENSUSE-SU-2024:10880-1 jhead-3.06.0.1-1.3 on GA media
These are all security issues fixed in the jhead-3.06.0.1-1.3 package on the GA media of openSUSE Tumbleweed...